Archive
January 2001
Vulnerabilities first published in this month (UTC), newest first.
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22232
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
232 results · Feed
-
Unscored —
The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged f…
-
Unscored —
bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands…
-
Unscored —
The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in…
-
Unscored —
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a passwor…
-
Unscored —CVE-2000-0848 Public exploit
Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via…
-
Unscored —
MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker…
-
Unscored —
Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.
-
Unscored —
Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails t…
-
Unscored —
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbi…
-
Unscored —CVE-2000-0982 EPSS 13%
Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web s…
-
Unscored —CVE-2000-0935 Public exploit
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attac…
-
Unscored —CVE-2000-0276 Public exploit
BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.
-
Unscored —
Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, …
-
Unscored —
Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root pri…
-
Unscored —
Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provide…
-
Unscored —CVE-2000-0972 Public exploit
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target fi…
-
Unscored —
Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users…
-
Unscored —CVE-2000-0523 Public exploit
Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via …
-
Unscored —
Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP…
-
Unscored —
Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet.
-
Unscored —CVE-2000-0868 EPSS 45%
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI script…
-
Unscored —
FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF i…
-
Unscored —
fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fc…
-
Unscored —
Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain …
-
Unscored —
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arb…
-
Unscored —
glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from …
-
Unscored —
Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attacke…
-
Unscored —CVE-2000-0846 Public exploit
Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username o…
-
Unscored —
The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidde…
-
Unscored —
Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain …
-
Unscored —CVE-2000-0254 Public exploit
The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configura…
-
Unscored —CVE-2000-0975 Public exploit
Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitra…
-
Unscored —
FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes.
-
Unscored —CVE-2000-0901 Public exploit
Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format character…
-
Unscored —
The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via…
-
Unscored —
authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacter…
-
Unscored —
A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list dire…
-
Unscored —CVE-2000-0949 Public exploit
Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary command…
-
Unscored —
Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute…
-
Unscored —
WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has…